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DETAILED ACTION 

1. Applicant's response filed on April 23, 2007 has been carefully 
considered. Claims 1, 5, 14, 27, 28, 32, 41 and 54 have been amended. Claims 17 
and 44 are cancelled. Claims 1-16, 18-43, 45-54 are pending. 



Claim Rejections - 35 USC § 103 

, 2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains. Patentability shall not be negatived by the manner in which the invention 
was made. 

3. Claims 1-3, 5-9, 11-16, 19-21, 23-30, 32-36, 38-43, 46-48, 50-53 are 
rejected under 35 U.S.C. 103(a) as being unpatentable over Bar-Or et al. (U.S. Pub. No. 
2003/0237005), hereinafter "Bar-Or", in view of Someshwar (U.S. Pub. No. 
2004/011 7655 A1). 

Referring to claims 1 . 28 : 

i. Bar-Or teaches: 

A method of controlling access to an electronic document, 

comprising: 

receiving at a document management system a request from a first 
user for an electronic document at a first user location, a rendition of the electronic 
document being stored in a document repository in the document management system 
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(see figure 2a, element 50 'recipient requests object identified in notification from object 
server' of Bar-Or); 

authenticating the first user at the document management system, 
using a set of access policies for the electronic document, to verify that the first user is 
authorized to obtain the electronic document (see figure 2a, element 52 'authentication 
information needed' of Bar-Or); and 

if the first user is authorized to obtain the electronic document, 
passing an encrypted rendition of the electronic document to the first user (see figure 
2a, element 66 'security server sends protected object to recipient' of Bar-Or); 

receiving at the document management system a request from a 
second user for access to the encrypted rendition (see figure 2b, element 70 'recipient 
attempts to access object* of Bar-Or); 

authenticating the second user at the document management 
system, using the set of access policies, to establish which operations the second user 
is allowed to perform on the encrypted rendition (see figure 2b, element 76 'satisfactory 
authentication' of Bar-Or); 

creating, at the document management system, a voucher for 
accessing the encrypted rendition, the voucher including an electronic key operable 
to decrypt the encrypted rendition of the electronic document; and passing the 
electronic voucher to a second user located at a second user location (see figure 2b, 
element 80 'security server sends key to recipient' of Bar-Or). 

However, Bar-Or does not specifically mention that the voucher 
includes the set of access policies for the electronic document. Neither does Bar-Or 
specifically mention that the set of access policies include access policies for a plurality 
of users. 

ii. Someshwar teaches a secure document printing system wherein 
Someshwar discloses including the set of access policies for the electronic document 
(see e.g. figure 4, element 409 'decryption key, access rules' of Someshwar). 

Someshwar further discloses the set of access policies including 
access policies for a plurality of users (see page 1, paragraph [0012] The invention 
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provides a policy server that the user logs onto to define access rules for the document. 
The user selects individual users and/or groups that may have access to the document, 
defines access rules for each user or group / of Someshwar, emphasis added). 

iii. It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Someshwar into the 
method of Bar-Or to include the set of access policies for the electronic document in the 
voucher. 

It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Someshwar into the 
method of Bar-Or to have the set of access policies including access policies for a 
plurality of users. 

iv. The ordinary skilled person would have been motivated to have 
applied the teaching of Someshwar into the system of Bar-Or to includes the set of 
access policies for the electronic document in the voucher, because "Additionally, the 
document creator has the ability to define access rights for the entire document as well 
as at the page level." (see page 2, paragraph [0026], lines 9-11 of Bar-Or). Therefore, 
by including the set of access policies in the voucher, the system has more flexibility to 
define or re-define the access rights for the documents. 

The ordinary skilled person would have been motivated to have 
applied the teaching of Someshwar into the system of Bar-Or to have the set of access 
policies including access policies for a plurality of users, because "The invention 
provides a system that allows users to securely transmit documents to a printer and 
have full control over who can access and print the document at the printer. The 
document creator is given full control over the printing accessibility of each page in the 
document for groups and individual users ." (see page 2, paragraph [0026] of 
Someshwar, emphasis added). 

Referring to claims 2, 8-9. 29, 35-36 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
controlling access to an electronic document. They further disclose the encryption (see 
page 1, paragraph [0008], line 1 of Bar-Or). 
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Referring to claims 3, 30 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
controlling access to an electronic document. They further disclose the access policies 
(see page 2, paragraph [0020], lines 14-18 of Bar-Or). 
Referring to claims 5. 32 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
controlling access to an electronic document. They further disclose the rights (see page 
2, paragraph [0021], lines 11-12 of Bar-Or). 
Referring to claims 6, 33 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
controlling access to an electronic document. They further disclose the expiration 
information (see page 4, claim 10 of Someshwar). 
Referring to claims 7. 34 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
controlling access to an electronic document. They further disclose the predetermined 
number of access operations (see page 4, claim 10 of Someshwar). 
Referring to claims 1 1 , 38 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
controlling access to an electronic document. They further disclose the audit trail (see 
page 1 , paragraph [001 1] of Bar-Or). 
Referring to claims 12, 39 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
controlling access to an electronic document. They further disclose the first user and 
the second user are the same individual (see figure 1, element 36 'recipient 1 of Bar-Or). 
Referring to claims 13, 40 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
controlling access to an electronic document. They further disclose the first user 
location and the second user location are identical (see figure 1, element 36 'recipient 1 
of Bar-Or). 

Referring to claims 14, 41 : 
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L Bar-Or teaches: 

A method of accessing an electronic document, comprising: 
requesting, from a document management system, access at a user 
location to an electronic document, one or more renditions of the electronic document 
being stored in a document repository in the document management system (see figure 
2b, element 70 'recipient attempts to access object' of Bar-Or); 

receiving at the user location an electronic voucher for the electronic 
document, the electronic voucher being issued by the document management system 
and including an electronic key operable to decrypt an encrypted rendition of the 
electronic document (see figure 2b, element 80 'security server sends key to recipient' 
of Bar-Or); and 

using the electronic key of the electronic voucher at the user 
location to decrypt the encrypted rendition of the electronic document (see figure 2b, 
element 82 'object decrypted 1 of Bar-Or). 

However, Bar-Or does not specifically mention that the voucher includes the set of 
access policies for the electronic document. Neither does Bar-Or specifically mention 
that the set of access policies include access policies for a plurality of users. 

ii. Someshwar teaches a secure document printing system wherein 
Someshwar discloses including the set of access policies for the electronic document 
(see e.g. figure 4, element 409 'decryption key, access rules' of Someshwar). 

Someshwar further discloses the set of access policies including 
access policies for a plurality of users (see page 1, paragraph [0012] 'The invention 
provides a policy server that the user logs onto to define access rules for the document. 
The user selects individual users and/or groups that may have access to the document, 
defines access rules for each user or group / of Someshwar, emphasis added). 

iii. It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Someshwar into the 
method of Bar-Or to include the set of access policies for the electronic document in the 
voucher. 
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It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Someshwar into the 
method of Bar-Or to have the set of access policies including access policies for a 
plurality of users. 

iv. The ordinary skilled person would have been motivated to have 
applied the teaching of Someshwar into the system of Bar-Or to includes the set of 
access policies for the electronic document in the voucher, because "Additionally, the 
document creator has the ability to define access rights for the entire document as well 
as at the page level." (see page 2, paragraph [0026], lines 9-1 1 of Bar-Or). Therefore, 
by including the set of access policies in the voucher, the system has more flexibility to 
define or re-define the access rights for the documents. 

The ordinary skilled person would have been motivated to have 
applied the teaching of Someshwar into the system of Bar-Or to have the set of access 
policies including access policies for a plurality of users, because "The invention 
provides a system that allows users to securely transmit documents to a printer and 
have full control over who can access and print the document at the printer. The 
document creator is given full control over the printing accessibility of each page in the 
document for groups and individual users ." (see page 2, paragraph [0026] of 
Someshwar, emphasis added). 

Referring to claims 15-16 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
accessing an electronic document. Bar-Or further discloses the document identifier and 
the reference to the document repository includes a path for accessing the document 
repository over a computer network (see page 3, paragraph [0025], lines 3-7 of Bar-Or). 

Referring to claim 19 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
accessing an electronic document. Bar-Or further discloses the verifying (see page 1, 
paragraph [0007], lines 7-1 1 of Bar-Or). 

Referring to claim 20 : 
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Bar-Or and Someshwar disclose the claimed subject matter: a method of 
accessing an electronic document. Bar-Or further discloses the access policies (see 
page 2, paragraph [0020], lines 14-18 of Bar-Or). 
Referring to claims 21 1 47 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
accessing an electronic document. Bar-Or further discloses the rights (see page 2, 
paragraph [0021], lines 11-12 of Bar-Or). 
Referring to claims 23-24. 50-51 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
accessing an electronic document. Bar-Or further discloses the storing (see page 1, 
paragraph [001 1], lines 8-1 1 of Bar-Or). 
Referring to claims 25, 52 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
accessing an electronic document. Bar-Or further discloses the encryption (see page 1 , 
paragraph [0008], line 1 of Bar-Or). 
Referring to claims 26. 53 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
accessing an electronic document. Bar-Or further discloses the expiration information 
(see page 1 , paragraph [0006], lines 3-4 of Bar-Or). 
Referring to claims 42-43 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
accessing an electronic document. Bar-Or further discloses the document identifier and 
the reference to the document repository where one or more renditions of the electronic 
documents are stored (see page 3, paragraph [0025], lines 3-7 of Bar-Or). 
Referring to claim 46 : 

Bar-Or and Someshwar disclose the claimed subject matter: a method of 
accessing an electronic document. Bar-Or further discloses the verifying (see page 1, 
paragraph [0007], lines 7-1 1 of Bar-Or). 
Referring to claim 48 : 
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Bar-Or and Someshwar disclose the claimed subject matter: a method of 
accessing an electronic document. Bar-Or further discloses the enabling (see page 2, 
paragraph [0017], lines 3-4 of Bar-Or). 
Referring to claims 27 t 54 : 
i. Bar-Or teaches: 

A method for controlling access to an electronic document, 

comprising: 

receiving at a document management system a request from a user 
for access to an electronic document at a user location, a rendition of the electronic 
document being stored in a document repository in the document management system 
(see figure 2a, element 50 'recipient requests object identified in notification from object 
server' of Bar-Or); 

authenticating the user at the document management system, to 
verify that the user is authorized to access the electronic document (figure 2a, 
element 52 'authentication information needed* of Bar-Or); and 

if the user is authorized to access the electronic document, 
creating, at the document management system, an encrypted rendition using the 
rendition that is stored in the document repository (see figure 2a, element 64 'security 
server cryptographically protects object and combines object with mobile code security 
policy and object controls' of Bar-Or); 

creating, at the document management system, a voucher 
including an electronic key operable to decrypt an encrypted rendition of the electronic 
document; and passing the electronic voucher to the user location (see figure 2b, 
element 80 'security server sends key to recipient' of Bar-Or). 

However, Bar-Or does not specifically mention that the voucher 
includes the set of access policies for the electronic document. Neither does Bar-Or 
specifically mention that the set of access policies include access policies for a plurality 
of users. 
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ii. Someshwar teaches a secure document printing system wherein 
Someshwar discloses including the set of access policies for the electronic document 
(see e.g. figure 4, element 409 'decryption key, access rules' of Someshwar). 

Someshwar further discloses the set of access policies including 
access policies for a plurality of users (see page 1, paragraph [0012] The invention 
provides a policy server that the user logs onto to define access rules for the document. 
The user selects individual users and/or groups that may have access to the document, 
defines access rules for each user or group / of Someshwar, emphasis added). 

iii. It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Someshwar into the 
method of Bar-Or to include the set of access policies for the electronic document in the 
voucher. 

It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Someshwar into the 
method of Bar-Or to have the set of access policies including access policies for a 
plurality of users. 

iv. The ordinary skilled person would have been motivated to have 
applied the teaching of Someshwar into the system of Bar-Or to includes the set of 
access policies for the electronic document in the voucher, because "Additionally, the 
document creator has the ability to define access rights for the entire document as well 
as at the page level." (see page 2, paragraph [0026], lines 9-1 1 of Bar-Or). Therefore, 
by including the set of access policies in the voucher, the system has more flexibility to 
define or re-define the access rights for the documents. 

The ordinary skilled person would have been motivated to have 
applied the teaching of Someshwar into the system of Bar-Or to have the set of access 
policies include access policies for a plurality of users, because "The invention provides 
a system that allows users to securely transmit documents to a printer and have full 
control over who can access and print the document at the printer. The document 
creator is given full control over the printing accessibility of each page in the document 
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for groups and individual users ." (see page 2, paragraph [0026] of Someshwar, 
emphasis added). 



4. Claims 4, 10, 18, 22, 31, 37, 45, and 49 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Bar-Or et al. (U.S. Pub. No. 2003/0237005), 
hereinafter "Bar-Or", in view of Someshwar (U.S. Pub. No. 2004/0117655 A1), and 
further in view of Ram et al. (U.S. Pub. No. 2002/0194485 A1), hereinafter "Ram". 

Referring to claims 4. 18. 31. 45 : 

i. Bar-Or and Someshwar disclose the claimed subject matter: a 
method of controlling access to an electronic document. 

However, Bar-Or does not specifically mention that the access 
policies identify one or more of operations. 

ii. Ram teaches a method for the secure distribution of electronic 
documents wherein Ram discloses that the access rights [i.e., access policies] identify 
one or more of operations with the document (see page 1, paragraph [0014], lines 5-9 
of Ram). 

iii. It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Ram into the method of 
Bar-Or and Someshwar to use the access rights to identify one or more of operations on 
the document. 

iv. The ordinary skilled person would have been motivated to have 
applied the teaching of Ram into the system of Bar-Or and Someshwar to use the 
access rights to identify one or more of operations on the document, because 
"document protection is a particularly important issue" (see page 1, paragraph [0014], 
lines 4-5 of Ram). 

Referring to claims 10. 22. 37. 49 : 
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Bar-Or, Someshwar and Ram disclose the claimed subject matter: a 
method of controlling access to an electronic document. They further disclose the PDF 
(see page 5, paragraph [0068], lines 6-10 of Ram). 



Response to Arguments 

5. Applicant's arguments filed on April 23, 2007 have been fully considered 
but they are not persuasive. 

Applicant argues: 

"However, Bar-Or does not disclose or suggest that the voucher includes the set 
of access policies for the electronic document." (see page 1 , last 2 lines, Applicant's 
Arguments/Remarks) 

"However, Sorneshwar does not disclose or suggest creating a voucher including 
a set of access policies where the set of access policies include access policies for a 
plurality of users." (see page 2, last 4 lines, Applicant's Arguments/Remarks) 

Examiner maintains: 

The amended claims 14, 27, 41 and 54 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Bar-Or in view of Someshwar. 

i. Bar-Or discloses a voucher for accessing the encrypted rendition, the 
voucher including an electronic key operable to decrypt the encrypted rendition of 
the electronic document; and passing the electronic voucher to a second user located at 
a second user location (see figure 2b, element 80 'security server sends key to 
recipient' of Bar-Or). 

However, Bar-Or does not specifically mention that the voucher includes 
the set of access policies for the electronic document. Neither does Bar-Or specifically 
mention that the set of access policies include access policies for a plurality of users. 
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ii. Someshwar teaches a secure document printing system wherein 
Someshwar discloses including the set of access policies for the electronic document 
(see e.g. figure 4, element 409 'decryption key, access rules' of Someshwar). 

Someshwar further discloses the set of access policies including access 
policies for a plurality of users (see page 1, paragraph [0012] The invention provides a 
policy server that the user logs onto to define access rules for the document. The user 
selects individual users and/or groups that may have access to the document, defines 
access rules for each user or group / of Someshwar, emphasis added). 

iii. It would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to combine the teaching of Someshwar into the method of 
Bar-Or to include the set of access policies for the electronic document in the voucher. 

It would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to combine the teaching of Someshwar into the method of 
Bar-Or to have the set of access policies including access policies for a plurality of 
users. 

iv. The ordinary skilled person would have been motivated to have applied 
the teaching of Someshwar into the system of Bar-Or to includes the set of access 
policies for the electronic document in the voucher, because "Additionally, the document 
creator has the ability to define access rights for the entire document as well as at the 
page level." (see page 2, paragraph [0026], lines 9-11 of Bar-Or). Therefore, by 
including the set of access policies in the voucher, the system has more flexibility to 
define or re-define the access rights for the documents. 

The ordinary skilled person would have been motivated to have applied 
the teaching of Someshwar into the system of Bar-Or to have the set of access policies 
including access policies for a plurality of users, because "The invention provides a 
system that allows users to securely transmit documents to a printer and have full 
control over who can access and print the document at the printer. The document 
creator is given full control over the printing accessibility of each page in the document 
for groups and individual users ." (see page 2, paragraph [0026] of Someshwar, 
emphasis added). 
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Therefore, the combination of Bar-Or and Someshwar disclose creating a 
voucher including a set of access policies where the set of access policies include 
access policies for a plurality of users. 

Conclusion 

6. Applicant's amendment necessitated the new ground(s) of rejection 
presented in this Office Action. Accordingly, THIS ACTION IS MADE FINAL. See 
MPEP § 706.07(a). Applicant is reminded of the extension of time policy as set forth in 
37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire 
THREE MONTHS from the mailing date of this action. In the event a first reply is filed 
within TWO MONTHS of the mailing date of this final action and the advisory action is 
not mailed until after the end of the THREE-MONTH shortened statutory period, then 
the shortened statutory will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Joseph Pan whose telephone number is 571-272- 
5987. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached at 571-272-3859. The fax and phone 
numbers for the organization where this application or proceeding is assigned is 703- 
872-9306. 
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Any inquiry of a general nature or relating to the status of this application 
or proceeding should be directed to the receptionist whose telephone number is 571- 
272-2100. 



Joseph Pan 




July 2, 2007 /-^M VU 

SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 



